Analisis Kesenjangan Keamanan Informasi Menuju Implementasi Iso 27001 Di Instansi Pemerintahan

This study aims to evaluate the maturity level of information security implementation at Diskominfo Bengkalis based on the ISO/IEC 27001:2022 standard. The research employs a descriptive approach with data collection techniques including observation, interviews, experiments, and questionnaires. The evaluation covers four ISO/IEC 27001:2022 control domains, namely Organizational Controls, People Controls, Physical Controls, and Technological Controls, to determine the maturity level and identify gaps between actual conditions and the established standard. The results indicate that the Physical Controls and Technological Controls domains have reached maturity level 3 (Defined), while the Organizational Controls and People Controls domains are at maturity level 2 (Repeatable). The overall average maturity score is 2.55, indicating that the implementation of information security is in a transitional stage toward a higher level of maturity. Based on the gap analysis results, this study proposes improvement recommendations aligned with ISO/IEC 27001:2022 controls to enhance the effectiveness of information security implementation at Diskominfo Bengkalis.